Is FaceTime HIPAA Compliant for Therapists?
Quick Answer
No. Apple publishes no HIPAA or Business Associate Agreement program for FaceTime, or for any other consumer Apple service — there is no paid tier, business account, or setting that makes FaceTime usable for a clinical session. This holds across every Apple ID type; Apple has never documented a BAA option for FaceTime anywhere in its legal or developer materials.
Written & fact-checked by the Therapy HIPAA Hub editorial team — see our editorial standards.
Verified October 2026 against Compliance analysis of FaceTime and HIPAA (no official Apple HIPAA documentation exists to cite directly)
BAA Available?
No
On Which Plan
None — not offered on any Apple ID or account type
FaceTime's end-to-end encryption protects the call itself, but HIPAA requires a signed Business Associate Agreement regardless of how secure the connection is — and Apple simply does not offer one, free or paid. Treat FaceTime the same as a personal Zoom or Google Meet account: fine for calling family, never for a clinical session.
What to Use Instead for Client Work
SimplePractice's built-in telehealth is covered under its BAA with no separate app to open — clients join from a browser link, the same convenience FaceTime offers without the compliance gap.
Affiliate link — we may earn a commission at no extra cost to you.
No Business Tier Changes This
Unlike Zoom or Microsoft Teams, where a paid business-tier account unlocks a BAA, there is no equivalent for FaceTime. It is purely a consumer feature tied to an Apple ID, with no enterprise or healthcare-specific version Apple sells separately. Any Apple Business Manager or managed-device deployment still does not include a BAA for FaceTime calls.
Why This Still Catches Therapists Off Guard
FaceTime is often the path of least resistance — a client already has it, there's no app to download, and the call quality is excellent. That convenience is exactly why it's a common compliance mistake: nothing about the experience signals risk, but the lack of a BAA is the same whether the call lasts two minutes or a full session.
Trusted by 225,000+ Therapists
50% Off Your First 4 Months of SimplePractice
SimplePractice is the #1 HIPAA-compliant practice management platform for therapists. Includes a signed BAA, encrypted messaging, telehealth, and full insurance billing.
Limited-time summer offer · No credit card required for trial
Need HIPAA-compliant email only? See Hushmail for Healthcare →
FAQ — FaceTime and HIPAA
Is there any way to make FaceTime HIPAA-compliant?
No. There is no business, enterprise, or paid tier of FaceTime that includes a Business Associate Agreement. Apple has never published a HIPAA compliance program for the product.
Is FaceTime encrypted, and does that make it safe enough?
FaceTime is end-to-end encrypted, which protects the call from interception in transit. But HIPAA compliance requires a signed BAA with the vendor regardless of encryption strength — Apple does not offer one, so encryption alone doesn't satisfy the requirement.
Can I use FaceTime for a quick check-in that isn't a full session?
Any call where you discuss a client's care, schedule, or identify them as your client carries PHI risk. There's no safe-duration exception — the lack of a BAA applies the same way to a 2-minute call as a 50-minute session.